156-315 試験問題を無料オンラインアクセス

If you check the box "Use Aggressive Mode", in the IKE Properties dialog box:

• A.The standard three-packet IKE Phase 2 exchange is replaced by a six-packet exchange.
• B.The standard six-packet IKE Phase 1 exchange is replaced by a twelve-packet exchange.
• C.The standard six-packet IKE Phase 2 exchange is replaced by a three-packet exchange.
• D.The standard six-packet IKE Phase 1 exchange is replaced by a three-packet exchange.
• E.The standard three-packet IKE Phase 1 exchange is replaced by a six-packet exchange.

Barak is a Security Administrator for an organization that has two sites using pre-shared secrets in its VPN. The two sites are Oslo and London. Barak has just been informed that a new office is opening in Madrid, and he must enable all three sites to connect via the VPN to each other. Three Security Gateways are managed by the same SmartCenter Server, behind the Oslo Security Gateway. Barak decides to switch from pre-shared secrets to Certificates issued by the Internal Certificate Authority (ICA). After creating the Madrid gateway object with the proper VPN Domain, what are Barak's remaining steps?
1.Disable "Pre-Shared Secret" on the London and Oslo gateway objects.
2.Add the Madrid gateway object into the Oslo and London's mesh VPN Community.
3.Manually generate ICA Certificates for all three Security Gateways.
4.Configure "Traditional mode VPN configuration" in the Madrid gateway object's VPN screen.
5.Reinstall the Security Policy on all three Security Gateways.

• A.1,2,3,5
• B.1, 2, 5
• C.1,3,4,5
• D.1, 2,3,4
• E.1,2,4,5

The following is cphaprob state command output from a ClusterXL New mode High Availability member:When member 192.168.1.2 fails over and restarts, which member will become active?

• A.Both members' state will be active
• B.192.168.1.2
• C.192.168.1.1
• D.Both members' state will be standby

What is the consequence of clearing the "Log VoIP Connection" box in Global Properties?

• A.IP addresses are used, instead of object names, in log entries that reference VoIP Domain objects.
• B.Dropped VoIP traffic is logged, but accepted VoIP traffic is not logged.
• C.VoIP protocol-specific log fields are not included in SmartView Tracker entries.
• D.The SmartCenter Server stops importing logs from VoIP servers.
• E.The log field setting in rules for VoIP protocols are ignored.

Rachel is the Security Administrator for a university. The university's FTP servers have old hardware and software. Certain FTP commands cause the FTP servers to malfunction.
Upgrading the FTP servers is not an option at this time. Which of the following options will allow Rachel to control which FTP commands pass through the Security Gateway protecting the FTP servers?

• A.SmartDefense > Application Intelligence > FTP Security Server
• B.Global Properties > Security Server > Allowed FTP Commands
• C.Rule Base > Action Field > Properties
• D.FTP Service Object > Advanced > Blocked FTP Commands
• E.Web Intelligence > Application Layer > FTP Settings